Skip to content

Cybercrime

Second supply chain attack hits LiteLLM in 2026

Malicious version 1.107.0 appeared on PyPI and Docker on Oct. 21, 2026, carrying malware built to steal cloud logins, developer secrets and AI service API keys.

https://breach-signal.com/cybercrime/second-supply-chain-attack-hits-litellm/

Share

Malicious version 1.107.0 of LiteLLM was pushed to the PyPI and Docker registries on Oct. 21, 2026, in the second supply chain attack against LiteLLM in 2026. PyPI is the Python package repository, and Docker hosts container images.

The release contained compiled malware built to steal cloud logins, developer secrets and AI service API keys, and to load remote-code execution tools. On Mastodon, Kevin Beaumont wrote, “LiteLLM got compromised… again.”

Was this helpful?

Join the discussion

Please read our Comment Policy before commenting. First-time comments are held for moderation. By posting a comment you agree to our Terms of Use and Privacy Policy, which explain how your name, email address and comment are used.

Your email address will not be published. Required fields are marked *